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DETAILED ACTION 
Continued Examination Under 37 CFR LI 14 
, A reoues, for continued examination under 37 CFR ,.1.4, inducing the fee se, forth in 
37 CFR ..17(e), was fled in .his application after final rejection. Since this application ,s 
e ,igib,e for continued examination under 37 CFR 1.1 ,4. and ,he fee se, forth in 37 CFR 1 ..7(e) 
has been time.y paid, the fina.Hy of the previous Office action has been withdrawn pursuant to 
37 CFR ..1.4. Applicant's submission filed on 0./30/2006 has been entered. 



Claim Rejections - 35 USC §102 
2 . The following is a Ration of the appropriate paragraphs of 35 U.S.C. ,02 tha, form the 
basis for the rejections under this section made in this Office action: 

A person shal I be entitled to a patent unless - 

n the United States before the mvention by the applicant tor paiem v > v thftt an 

patent b another fi.ed in ^^^^^^^%%^^i!c effects for purposes of £j. 
International application file under he « ^JjJ ™» ^ Rational application designated the Un.ted 
subsection of an appl.cat.on filed in * e Un J~ £ ^ tr J y in the English language. 
States and was published under Article 21(2) ot sucn ireciy 

, , , uKr , o2(^ as being anticipated by Mimura et 
3. Claims 1 , 1 2 and 20 rejected under 35 U.S.C. 1 UZ(e) oei _ g 

al.USPN 6,747,564 Bl. 

a physical asset protection module that provides physical protection for said asset by 
tngg enng a user status change upon valid entry or exit through a door of a building (fig. 1 A 8 
and col 4 lines 23-42; smart card door authentication); 

an information asset protection module that provides information security protection for 
said asset (col. 4 lines 22-65; bank door and bank user database, that stores important 
customers information, authentication); 
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an in.egra.or tha, performs an integration of said physical asse, protection module and 
said information asse, protection module, wherein said system is one of in a hosted environment 
and at said asset, the in.egra.or providing integration of the physiea, protection and informal 
from the information asse, protection module to gran, rights ,o the informal sys.ems based on 
physical access, or independent of physical access, wherein ,he informal asse, protection 
reftecs ,he user status change updated ,o reHec, changes in security access requirements (col. 5 
. unes 50-col. 7 lines 55; MM* auineniicaOon i.for.aiion resui, fails access co m pu,er 
da.aoase ,o g -on is denied >... »»n car, door auinen.icaiion is in,e g ra,cd »** copier 
database/application aulhenlicalion); and 

transmitter for maintaining information asse, protection by denying access to the 
information asset in ,he hosted environmen, when .here is a hreach of*, physical asse, 
pr o,ec,ion (col. 7 lines 1-65; if.ne receiving door a Ul nen,,ca,ionfin g er P rin< verification resui, as 
a success or failure and S ran,^denyin g colter a PP ,ica,,on access tased on ,ne received 
verification result) . 

Claim Rejections -35 USC § 103 

■ ■ tt ; rtnn f-)SIISC 1 03(a) which forms the basis for all 

4. The following is a quotation ot 35 U.s.^. i^W 

obviousness rejections set forth in this Office action: 

W A patent may not oe obtained though f^^^*^ ^31^ 
section 102 of this title, if the differences between ^^^S^e the invention was made to a person 

manner in which the invention was made. 

5. Claims I, 12 and 20 are rejected under 35 U.S.C. 103(a) as being unpa.en.able over Claus 
e. al. in view of Monroe Pub. No.: US 2003/0025599 A 1 . 
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Regarding claims 1.12. and 20, Claus.e, .1. a method/system for protecting an asset, comprising: 
a physical asset protection module that provides physical protection for said asset by 

triggering a user status change upon valid entry or exit through a door of a building (fig. 7); 

an information asset protection module that provides information security protection for 

said asset (co,. 9 lines 48-65; authenticating ... granting access... to information fc - computer. 

an integrator that performs an integration of said physical asset protection module and 
said tnformation asset protection modu,e, wherein said system is one of in a hosted environment 
and a, said asset, the integrator provtding integration of the physica, protection and mformauon 
from the information asset protection module to gran, rights ,o the information systems based on 
physica, access, or independently of physical access (co,. 1 1 >ines 17-co,. ,2 lines 4 and col. 3 
lines 33-52; physical asse, protection (smart car, authentication to open a "oar). ..and 

computer information resource protection are performed in a single user smart card 
authentication and'or multiple different authentication is performed inusin g a single smart card 
to grant access, to building door... computer information): and 

transmitter for maintaining information asse. protection by denying access to the 
information asset in the hosted environment when there is a breach of the physica, asse, 
protection (co,. ,0 lines 1-34; .hen smart card authentication is not valid access to the computer 

application is denied). 

Claus e, al. fails ,0 disclose wherein the information asse, pro.ec.ion reflects ,he user 

starus change upda.ed to reflect changes in security access requirements. 
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How ever Mo.ce aiscloses wherein the information asset proton refects the use, 
_ chan g e ^ to — chan.es ,„ securtty — — (pa, 00.-0050, ~ 



acces 



chafes n security access requirements). 

L. „ — — — — - - - W ° UW ~ ^ m °" V 

do so because it would allow further security. 
No.: US 2003/0025599 Al. 



As per claims 



, and 12 , Baird teaches a method of pro.ee.ins an assetof an —on and/or 



physical type, comprising: 

proven, processor-based physical asset protection (Baird Co, , a hnes 3,-65, 

providing processor -basea information asset protection (Baird Col. 1 2 lines 3-col. 
, ines 5, pa S s„ora is usea to access the site and data is encrypted to protect asset,; 

said processor-oased phys.ca, asset protection and said processor-based 
'^protection in a hosM environment (Co,. 16 lines 6,-col. ,7 lines 67, ana 



integrating 
information 
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Abstract; process-based smart card and information asset protection is integrated by 
authenticating user's password and biometric data stored in the smart card, ; and 

transmit a breach of physica, asset protection in the hosted environment such that 

.formation asset protections maintained b y denying access thereto (f,g. 7 eiemen, ,05, and 60 7 , 

col 18 lines 34-37 and col. 20 lines 21-26). 

r -,w, t^rhtriaeeringa'user status change upon 
RairH does not explicitly teacn inggcuug « 
the changed (old password)), Baird does noi v 

valid entry or exit through a door of a building. 

closes triggering a user status change upon valid entry or exit 
However Monroe discloses triggering 

through a door of a building (0048-0070). 
inventlonw ^ 

unau thor, Z ed access fro, entering a building door by updating a users database of any changes. 

Baird teaches the method, said integrating further comprising providing, maintaining and 
operatl ng a software application that integrates said physical asset protection (Baird Co,. 

33-42) and said information asset protection in said hosted environment in accordance with user 

instructions (Baird Abstract). 
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Baird teaches the method, further comprising: 

registering a user by storing user information (Baird Coi. 7 hues ,9-33); 

authenticating a user by comparing a, leas, one user characteristic from said user 
information with a third-party database (Baird Co!. 7 hues 63-coi. 8 hnes 21); 

detect anomalous usage (Baird Col. 12 lines 10-28); 

" neS "t a«ng a correcttve action, wherein a Hrs, correcttve action is ta.en if said authenticating 

„ generates a non-authenticated user output and a second corrective action is ta.en ,f 
a„omaloususa g eisde,ec,eddur i n g saidcompari„ g s,ep(Baird F i g .7,o. 6 000, i fmva,,d 

input entered the corrective action is taKen bac k ,0 renting a user to enter password and 

biometric data again); and 

where i„ satd authenticating and comparing steps provide physical asset protecon and 

Baird teaches the method, further comprising: 

mistering a visitor by providing inttia, visitor information (Baird Co,. 7 hnes 0-33); 
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sparing sa,d ini.ia, visitor information with a third-party database to determine if said 
registered visitor is entitled to access to said asset (Ba.rd Co,. 7 ,ines 63-co,. 8 lines 2,); and 
reiving sa,d registered visitor in an authentication area (Baird Coi. 8 .ines 22-32); 
checking a match of said registered visitor with a physica, entity (Baird Co,. ,4 hnes 36- 

44 col. 17 lines 59-col. 18 lines 4); 

regulaang entry on the basis of said cheeking and comparing steps, wherein said 
regisl ered v.sitor is denied access if said registered visitor does no, match said physica, entity, or 
said comparing step indicates tha, said visitor does no, have access to said asset (Baird Co,. ,7 

lines 1-27); and 

„here,n a, ,eas, one of said comparing s,ep, said receiving step and said checking step 
provide physica, asset protection and information asset protection (Baird Abstract). 

Baird teaches the method, wherein one of said receiv.ng and said comparing step compnses - 
applying biometrics to con.ro, access for said user (Baird Co,. 8 ,i„es ,-2,). 

Baird teaches the method, wherein said biometrics comprises one of scanning and tes.ing a ,arge, 
tissue of said visitor's body (Baird Col. ,7 lines 28-31). 

A s per claim 9, Baird and Monroe teach al, the subiec, ma„er as described above. In addHion, 
Baird teaches the method, wherein sa,d phys.ca, asset pro.ection comprises securing ingress and 
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egress areas for a ,oca,ion protected by a physical barrier (Baird Co,. 2 lines 1-17; biome.ric 

smart card is used to gain access to gain access to protected data).. 

As per claim ,3, Baird and Monroe teach all the subject matter as described above. In addition, 
Baird teaches the asset protection system, further comprising: 

a user tracking system that authenticates a user as a registered user and provides physical 
access and tnformation access to said asset in accordance with historical use patterns of said user 
for said asset, wherein said user tracking system updates said historical use patterns in 
accordance with a current use pattern of said user (Baird Co,. 1 9 lines 36-50, Fig. 7 No. 604, and 

606). 

As per claim 14, Baird and Monroe teach all the subject matter as described above. In addition, 
Baird teaches the asset protection system, said historical use patterns comprising a, leas, one of 
frequency, type and time duration (Baird Col. 19 lines 36-50). 

As per claim 1 5, Baird and Monroe teach all the subject matter as described above. ,n addition, 
Baird teaches the asse, protection system, further comprising a visitor tracking system that 
authenticates a registered visitor tha, has not been barred from accessing said asset, and allows 
access in accordance with reception authentication process (Baird Col. 19 lines 36-50). 

As per cla.m ,6, Baird and Monroe teach all the subject matter as described above. In addition, 
Batrd teaches the asse, protection system, further comprising a biometrics authentication 
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su bsys,em,ha, uses pbysica, data of said visitor to a„o„ said access (Baird Co,. 8 lines 1-21, 



As per claim . 7, Baird ana Mo« teach a„ the subject matter as described above. ,„ addition, 
portion of said visitor's body (Batrd Col. 17 lines 28-31). 

As per claim 1 9, Baird and Monroe teach a„ the street matter as described above. ,n addition, 



instruction to 
Abstract). 



d evelop, maintain and operate a computer application to protect said asset (Baird 



, j nil <:r 103(a) as being unpatentable over Baird, lllet 
7 Claims 20-29 are rejected under 35 U.S.C. HWa) 8 

al (Baird, Patent No, VS 6,732,278 B2, in view of Boate e, al. (Boate Pub. No, US 
2002/0,04006 A.) and Monroe Pub. No, US 2003/0025599 A,. 

As per Cairn 20, Baird teacbes a method of providin g asset security protection, comprising 

• . „f ^et access wherein protection of physical and 

hosted environment indicative of asset access, w 

^nation characteristics of said asset is integrated in said hosted environment (Baird Abstract. 
ao «ss ,0 tbe dev.ee is .ranted after autbentication process during wbtcn a user password and 
biometric are provided to the device), 
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Baird does no, explicitly «* transmitting and receiving a f,rs,a„d second signals 
respective* .o a hosted environment, said firs, signai comprising user registration 



characteristics, 



.ensues, 

However Boa.e e, a., teaches transnritting and receiving a signa, to a host environment 
(Boa.e Fig. 4a) and new user registration (Boate Page 5 par. 0036) 

would aiiow a secure authentication of an individua, and access controi to components of the 
compu ,er netwo* (Boate Page , par. 000,) by emitting signais to the hosted environment 
and receiving signals from the hosted environment. 

Baud and Boatc do no, explicitly teach triggering a user s.a.us change upon vaiid entry or 

exit through a door of a building. 

However Monroe d.scloses triggering a user status change upon vaiid entry or exit 

through a door of a building (0048-0070). 

inven ,io„ was made to combine ,he .cachings of Monroe whhin the comb.nation system of Ba.rd 

WO u,d turther contro, an unau.hori.ed access from entering a building door by npdatmg a users 

database of any changes. 
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As per Ca.m 2, , Baird, Boa tt , and Monroe .each ... .he subjec, maUer as described above. ,n 
addition Boate teaches the method, wherein said transmitting comprises: 

providing user registration information to said hosted environment (Boate Page 5 par. 

\ 

0036); and 

processing a, said hosted environment said user tnformation to generate said second 
signa, (Boate Page 5 par. 0036) The ra.iona, for combin.ng are the same as Cairn 20 above. 

A , per Cairn 22, Baird, Boate, and Monroe teach .,, the subject matter as described above, in 
addition Boate teaches where.n said receiving comprises receiving an access decision from sa,d 
hos ,ed environment, said decision be.ng in accordance with biometrics of a user ( Boa,e Page 4 
par. 0032) The rational for combining are the same as Cairn 20 above. 

As per ciaim 23, Baird, Boate, and Monroe teach ... the subjec, matter as described above, in 
addition Boate teaches further comprising comparing said user information to a third-party 
database to generate an authentication output as sard second signa, (Boate Page 6 pa, 0045) The 
rational for combining are the same as claim 20 above. 

As per ciaim 24, Baird. Boate, and Monroe teach ... the subjec, matter as desenbed above. In 
addition Boate teaches further comprising: 

entering creden.ials of a user in,o an access da,abase in said hos.ed environmen, to euro,, 

said user (Boate Page 5 par. 0036); and 
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0 „,pu,,in g an identification object in accordance with said credential wherein 
unauthorized access is denied bv said hosted en.ronnten, (Boate Pa g e 4 pa, 0034, Pi, 4B; 

lh ea rt a„ h e t , m eo f , h ei„ven t io„,oco mb ine, h e t eac W n g so f Boa t e W i, h in th es y s,c m o f Ba ir d 
b ecause i, wouid re g is,er use, information to enroi, and wouid aiso info™ use. bv their 
identification when the access is denied or accepted. 



chta 25, Baird. Boate, and Monroe teach aH the subject matter as described above. ,n 

least one of alter and append said 



As per 

addition Boate teaches said entering: 

providing an authorized operator with permission to at 
access database (Boate Page 4 par. 0034); 

database to g e„era,e a search resuU, wheretn said biomerrtc and credentia, data is added to said 
aul hen,ic, in accordance with said biometric (Boate Pa g e 5 par. 0039, pa g e 6 par. 



user is not 
0045); 



message 



denv,n g access to said user if satd user appears ,„ a barred user database (Boate F ,, 4C ; 
indicating refusal to logon); 
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.determining if a photo of said user is in said hosted environment, wherein a dig,<al image 
is imported to generate said photo ifsaid photo is not present in said hosted envtronmen, (Boa.e 

Page 4 par. 0032); 

verifying that said photo represents said new user (Boate Page 5 par. 0036, page 6 par. 

0045); 

providing additions user information and user access privtieges to said hosted 
environment (Boate Page 5 par. 0036); and 

generating said identification object having a predetermined iayout, said tdenffication 
object comprising an encrypted three-dimcnsiona, barcode in accordance with said biometric and 
, a ,d credentia, data (Boate Page 5 par. 0036; user is handed a personai identification dev.ce tha, 
Has b— data, pubiic Key and private Key) The rationa, for combining are the same as Ca.rn 
20 above. 

As per ciaim 26, Baird, Boate, and Monroe teach ... .he subject matter as described above, in 
addition Boate teaches said ousting comprising; receiving said identification object from sa,d 
„ os ,ed envtronmen, and producing a copy of said identification object; said user verifytng 
, n ,egri,y of said biome.nc, said photo and said credential, and distribute said identified 
. object to said user (Boate Page 5 par. 0036, The rationai for combining are the same as Catrn 24 
- above. 

As per ciatm 27, Baird, Boate, and Monroe teach ai. the subject matter as described above. ,„ 
addition Boate teaches, wherein said idenfification object is produced by printing an 
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identified badge (Boate Page 5 par. 0036; persona, digital iden.ification deviee reads on 
iden.ifica.ion badge) Therefore U would have been obvious .0 one havening ordinary *... .« .he 
ar, a. ,he .ime of .he invention .0 combine the teachings of Boa, with in the system of Batrd 
because i. wou.d authen.ica.e and integrate a users identity by password and b.ometric data. 



As per Cairn 28, Baird, Boate, and Monroe teach a., the subject matter as described above. .« 
addition Boate teaches wherein said biometric comprises a scan of a bio.og.ca. target tissue 
(Boate Page 6 par. 0045). The rational for combining are the same as claim 27 above. 

A, per Cairn 29, Baird, Boate, and Monroe teach ... the subject matter as desenbed above. In 
Edition Boate teaches, wherein said target .Issue comprises a. leas, one of finger, hand and eye 
parameter (Boatc Page 6 par. 45). The rational for combining are the same as Cairn 27 above. 



Conclusion 

8 . Any inquiry concerning this communication or earlier communications from the 
examiner should be directed ,0 E!e„. A. Shiferaw whose telephone number is 571-272-3367. 
The examiner can normally be reached on Mon-Fri 8:00am-5:00pm. 

,f attempts ,0 reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. SheiRh can be reached on 57 ,-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 
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H n, the status of an application may be obtained from the Patent 
Information regarding the status 01 cm <w 

App ,ica,io„ —ion Retrieval (PA.*) svs,etn. — «— - — 

may be ob.neo from either Prtvate FA* - P-* »*■ — " *» 

applications is available through Private PAIR only. For more information about the PAIR 

,1, see »M*«~~»>. - - — °" — W PnVaK " 

sys ,em, contact the Electronic Business Center (EBC) a, «M.7*.97 (toll-free, 
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